| [Created by: generate_policies_tests.py] |
| |
| Cast certificate chain with the following policies: |
| |
| Root: policies={} |
| Intermediate: policies={anyPolicy} |
| Leaf: policies={anyPolicy} |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 11 (0xb) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2018 GMT |
| Subject: CN=Leaf |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:bc:42:b8:af:d7:ce:53:49:1d:f9:fd:41:b0:ce: |
| 40:7a:c1:5d:79:db:a8:9d:6b:7b:f9:ef:8d:b8:f4: |
| 22:e3:80:f9:5c:67:e1:91:a0:66:c2:d7:07:0a:ef: |
| ed:86:ab:c0:9e:d0:b1:95:cf:83:9b:ce:7b:0c:75: |
| 05:8c:2f:44:e4:2f:ba:d8:17:04:ec:37:a2:6f:20: |
| 66:d9:09:a9:20:e2:43:d8:d4:77:26:82:ec:a7:ca: |
| 48:2b:19:73:73:fd:4b:d4:a6:38:e3:ea:6e:d7:02: |
| cd:18:e6:bd:c2:c6:9a:bf:ec:1f:ce:b0:e9:03:eb: |
| 03:65:cd:e2:46:ad:a3:c1:4d:23:b3:d1:b1:52:e2: |
| 5d:56:dc:bd:21:35:17:4b:65:e9:3b:e8:9a:f5:7b: |
| 30:74:3f:da:e7:5a:8b:4e:74:53:56:db:f2:15:f6: |
| 7d:bb:20:f0:fd:e5:bb:8b:a3:7d:10:f3:f2:d1:76: |
| d6:99:fc:0b:29:cb:bc:ec:dd:ed:85:54:01:a2:07: |
| 96:ce:7e:24:ee:1b:12:2e:e0:65:8f:3d:de:e2:75: |
| 64:a1:2f:1c:43:dd:d1:e9:6f:80:58:b0:11:d6:8a: |
| 76:48:b5:60:38:7e:c0:52:7a:4a:6d:7d:b4:c2:4b: |
| d8:d2:f8:27:8a:88:54:f2:05:a0:65:12:ff:26:27: |
| bc:bb |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 63:5A:64:7F:7A:5B:13:1C:41:A8:00:23:5D:9E:D5:4E:86:22:FC:56 |
| X509v3 Authority Key Identifier: |
| keyid:29:2B:35:96:F9:DF:46:CD:68:36:D9:20:F1:95:F7:40:FB:C6:58:33 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Client Authentication |
| X509v3 Certificate Policies: |
| Policy: X509v3 Any Policy |
| |
| Signature Algorithm: sha256WithRSAEncryption |
| 0c:f9:f7:0f:75:d6:67:f3:5b:a1:3a:3a:20:8b:d3:3a:f6:14: |
| f8:ac:89:22:2e:36:03:d3:7f:3f:bc:19:9f:2d:b7:c4:c9:99: |
| 3d:85:10:a7:ca:d6:d5:97:56:8d:56:f1:98:d8:43:29:b2:87: |
| 3c:6d:6f:52:00:8c:1d:3a:04:2b:f5:7b:75:40:7c:01:79:22: |
| 00:10:48:a4:27:b6:30:b9:29:2b:14:de:cc:bf:f4:1e:cc:8c: |
| 7f:6e:97:18:cf:03:f6:5d:ea:d1:47:2c:e8:78:73:31:e8:48: |
| c8:54:76:f6:b1:5b:a2:70:7e:8f:7f:12:2d:fa:2f:fd:d8:97: |
| 34:90:fb:d4:2a:d3:3c:65:cc:25:1b:b0:d9:b9:8e:2e:e2:9a: |
| 31:ce:4e:2f:df:7e:ee:0e:da:a0:3b:cd:12:8a:0d:6b:e0:10: |
| 81:25:8e:25:25:a0:91:7a:e2:a5:ee:aa:d1:8f:cf:03:ca:d5: |
| 45:1d:a2:14:67:7d:ac:cb:d9:1d:0a:af:e0:e9:b6:e9:53:27: |
| b7:63:bf:59:00:fb:8d:bc:17:00:fb:92:74:30:9c:f8:86:bf: |
| 2f:94:73:32:af:95:a7:12:96:bf:37:6a:d7:9d:87:1e:17:27: |
| 41:a7:6a:bc:9b:fa:ae:12:b3:ec:96:3c:5e:62:80:4f:3c:e7: |
| 9f:a4:0a:ed |
| -----BEGIN CERTIFICATE----- |
| MIIDlDCCAnygAwIBAgIBCzANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTgwMTAxMTIwMDAwWjAPMQ0wCwYD |
| VQQDDARMZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEK4r9fO |
| U0kd+f1BsM5AesFdeduonWt7+e+NuPQi44D5XGfhkaBmwtcHCu/thqvAntCxlc+D |
| m857DHUFjC9E5C+62BcE7DeibyBm2QmpIOJD2NR3JoLsp8pIKxlzc/1L1KY44+pu |
| 1wLNGOa9wsaav+wfzrDpA+sDZc3iRq2jwU0js9GxUuJdVty9ITUXS2XpO+ia9Xsw |
| dD/a51qLTnRTVtvyFfZ9uyDw/eW7i6N9EPPy0XbWmfwLKcu87N3thVQBogeWzn4k |
| 7hsSLuBljz3e4nVkoS8cQ93R6W+AWLAR1op2SLVgOH7AUnpKbX20wkvY0vgniohU |
| 8gWgZRL/Jie8uwIDAQABo4HyMIHvMB0GA1UdDgQWBBRjWmR/elsTHEGoACNdntVO |
| hiL8VjAfBgNVHSMEGDAWgBQpKzWW+d9GzWg22SDxlfdA+8ZYMzA/BggrBgEFBQcB |
| AQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1lZGlh |
| dGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly91cmwtZm9yLWNybC9JbnRl |
| cm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD |
| AjARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBAAz59w911mfz |
| W6E6OiCL0zr2FPisiSIuNgPTfz+8GZ8tt8TJmT2FEKfK1tWXVo1W8ZjYQymyhzxt |
| b1IAjB06BCv1e3VAfAF5IgAQSKQntjC5KSsU3sy/9B7MjH9ulxjPA/Zd6tFHLOh4 |
| czHoSMhUdvaxW6Jwfo9/Ei36L/3YlzSQ+9Qq0zxlzCUbsNm5ji7imjHOTi/ffu4O |
| 2qA7zRKKDWvgEIEljiUloJF64qXuqtGPzwPK1UUdohRnfazL2R0Kr+DptulTJ7dj |
| v1kA+428FwD7knQwnPiGvy+UczKvlacSlr83atedhx4XJ0Gnaryb+q4Ss+yWPF5i |
| gE8855+kCu0= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 22 (0x16) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2018 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:cc:f0:0a:27:5e:f1:ca:c1:d3:fd:33:14:dc:25: |
| 7a:49:89:89:c5:67:fd:e4:56:aa:2b:1b:40:80:84: |
| b8:48:7e:ed:66:4c:23:82:99:5b:86:db:fc:82:35: |
| b3:56:01:bf:01:14:f6:46:5d:c7:96:5d:55:a7:a7: |
| e7:5c:8d:a7:c9:e9:a2:20:e4:ad:4c:8c:fe:2e:17: |
| 59:56:8d:ed:7c:97:68:5a:0d:dd:b1:41:b7:24:44: |
| bc:77:84:f1:af:fe:87:1c:83:c7:10:72:8a:44:62: |
| 99:a0:5c:78:f0:28:73:bf:2c:de:d1:8e:69:01:b6: |
| 5a:39:20:2c:d9:fe:11:5f:09:27:5d:ff:2a:98:9a: |
| a8:6b:6a:e4:40:27:0d:b7:a7:2d:85:fa:7d:7a:08: |
| d4:bb:9f:ff:27:e8:3a:d4:f5:15:a0:40:4f:c1:11: |
| 13:26:d7:1b:39:96:12:b7:19:aa:73:5c:4c:f7:ea: |
| d0:95:4d:14:a4:aa:73:63:58:8f:fe:e0:5a:83:31: |
| 7f:34:aa:02:e1:d9:6c:ed:84:7b:7f:ec:6b:7e:d9: |
| 3f:65:98:87:28:18:d5:aa:0f:d5:2f:ec:1a:86:19: |
| ed:3c:c6:a1:10:4a:fd:ac:60:6a:7a:ff:6a:66:c4: |
| 99:49:67:7c:3f:37:32:eb:80:48:e5:0b:6a:1d:3d: |
| 6a:47 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 29:2B:35:96:F9:DF:46:CD:68:36:D9:20:F1:95:F7:40:FB:C6:58:33 |
| X509v3 Authority Key Identifier: |
| keyid:FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| X509v3 Certificate Policies: |
| Policy: X509v3 Any Policy |
| |
| Signature Algorithm: sha256WithRSAEncryption |
| 1a:0b:d3:2f:32:36:12:5e:be:00:85:07:03:11:d9:af:0e:54: |
| fe:c6:02:a0:f3:40:e3:4e:7d:52:b3:8b:24:75:c9:9e:de:0c: |
| a3:30:6e:8d:1f:e4:ea:cc:97:96:5e:b3:ad:78:34:99:05:d1: |
| 69:99:09:fd:e3:3a:0c:ab:df:d0:7b:61:9d:af:da:71:96:8d: |
| 6d:26:da:16:bd:54:f8:e9:12:7e:e6:1b:f6:d2:d3:69:a4:ba: |
| 1f:4f:5c:8c:66:d7:2f:42:79:51:98:6e:55:4c:da:2a:d2:7d: |
| 48:22:bc:33:65:d1:87:6b:df:f9:c7:7a:55:db:70:25:4f:14: |
| ef:15:07:aa:93:41:99:2c:f7:37:8f:e5:0f:73:41:05:18:d5: |
| f0:8a:e7:3e:4f:89:fa:a5:4d:86:16:12:63:6c:11:95:d0:a6: |
| 81:d2:63:68:51:0a:ae:8b:2c:17:24:32:3a:44:57:fc:a8:0f: |
| d3:5f:95:ca:24:6e:ee:03:85:54:95:3d:42:4a:b0:ed:7e:4e: |
| d5:2c:e7:e0:73:90:72:aa:6b:b6:2a:9a:65:6b:ce:c1:1d:1e: |
| 46:d0:a9:f5:7a:83:89:41:3c:e4:19:8b:b7:2a:93:23:d7:fb: |
| c5:a5:3f:4e:8d:7b:ec:d2:4f:b9:a9:4d:2b:f9:b5:7b:bb:a2: |
| 66:51:a2:56 |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIBFjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPAKJ17x |
| ysHT/TMU3CV6SYmJxWf95FaqKxtAgIS4SH7tZkwjgplbhtv8gjWzVgG/ART2Rl3H |
| ll1Vp6fnXI2nyemiIOStTIz+LhdZVo3tfJdoWg3dsUG3JES8d4Txr/6HHIPHEHKK |
| RGKZoFx48Chzvyze0Y5pAbZaOSAs2f4RXwknXf8qmJqoa2rkQCcNt6cthfp9egjU |
| u5//J+g61PUVoEBPwRETJtcbOZYStxmqc1xM9+rQlU0UpKpzY1iP/uBagzF/NKoC |
| 4dls7YR7f+xrftk/ZZiHKBjVqg/VL+wahhntPMahEEr9rGBqev9qZsSZSWd8Pzcy |
| 64BI5QtqHT1qRwIDAQABo4HeMIHbMB0GA1UdDgQWBBQpKzWW+d9GzWg22SDxlfdA |
| +8ZYMzAfBgNVHSMEGDAWgBT/a1XjSAc6faU37kyTQ4EhDs1f0DA3BggrBgEFBQcB |
| AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAA |
| MA0GCSqGSIb3DQEBCwUAA4IBAQAaC9MvMjYSXr4AhQcDEdmvDlT+xgKg80DjTn1S |
| s4skdcme3gyjMG6NH+TqzJeWXrOteDSZBdFpmQn94zoMq9/Qe2Gdr9pxlo1tJtoW |
| vVT46RJ+5hv20tNppLofT1yMZtcvQnlRmG5VTNoq0n1IIrwzZdGHa9/5x3pV23Al |
| TxTvFQeqk0GZLPc3j+UPc0EFGNXwiuc+T4n6pU2GFhJjbBGV0KaB0mNoUQquiywX |
| JDI6RFf8qA/TX5XKJG7uA4VUlT1CSrDtfk7VLOfgc5Byqmu2Kppla87BHR5G0Kn1 |
| eoOJQTzkGYu3KpMj1/vFpT9OjXvs0k+5qU0r+bV7u6JmUaJW |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 21 (0x15) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2018 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:be:a1:75:40:5a:14:73:94:76:9e:7d:38:ff:ed: |
| a8:db:dc:94:ad:5e:90:c1:fa:4f:c6:8f:5c:0d:17: |
| fd:08:d4:34:2d:4a:1d:b7:a3:bc:88:ae:f0:fc:7a: |
| bb:ea:fe:c8:e6:4f:5b:64:bc:0c:f8:64:01:cc:ae: |
| 82:68:69:d5:b0:fb:a5:31:01:ba:5d:f9:6d:85:c2: |
| b1:c9:da:1c:84:01:24:dc:bb:de:52:54:f2:a2:a4: |
| 0e:25:d8:c1:07:7f:e9:80:1a:1f:f8:7e:6b:d0:1f: |
| c3:6d:1e:69:0e:eb:dc:07:ad:e4:92:d8:34:7d:11: |
| 19:27:ea:e1:ef:54:92:ae:2d:34:8e:80:06:84:2e: |
| 3e:b3:63:06:63:c2:db:88:7b:2a:f2:67:63:e3:d3: |
| 31:cb:4a:05:6f:c3:85:8c:00:4a:c1:1a:0b:cb:c4: |
| 90:fa:db:1d:97:b2:33:5a:86:b4:81:9b:48:f1:ca: |
| 59:88:cf:c7:05:fd:18:75:a9:c3:7f:20:7a:aa:25: |
| ec:a4:db:1f:ea:76:b2:f7:a5:2d:57:90:ab:e7:de: |
| fe:d1:d7:71:8e:2b:46:64:7c:e3:8c:ab:88:84:7d: |
| 64:3e:39:0f:8a:ab:99:7d:5a:63:08:1d:28:49:45: |
| 6e:99:4f:f6:b9:86:bb:d1:46:6c:97:ec:36:29:5a: |
| bc:15 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0 |
| X509v3 Authority Key Identifier: |
| keyid:FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 34:45:fc:7c:c8:38:e2:42:87:f6:de:f2:07:ad:9a:94:ce:af: |
| e7:09:2e:05:68:4f:25:01:1b:ae:0c:c9:55:21:42:55:02:42: |
| 02:83:af:cf:72:44:96:28:e9:43:e2:bc:53:38:67:f9:20:44: |
| 13:76:20:23:a5:3d:a1:8a:6d:bc:33:25:26:24:6f:ca:58:c6: |
| 26:ac:ad:cb:69:79:44:3d:01:fb:2f:6f:23:47:da:89:af:0b: |
| 22:1e:06:27:ea:08:b5:11:38:59:9d:87:19:b2:51:3c:22:ec: |
| c2:b1:e3:f4:6c:65:4a:ff:0d:a7:23:40:e7:d8:f3:3b:75:a1: |
| 36:bb:e0:aa:88:5d:14:cd:a5:6e:47:4b:09:e7:fb:12:d4:4e: |
| 31:e2:ff:58:ed:bd:06:2e:c2:27:8f:1e:bb:14:24:cf:23:9a: |
| 63:97:f7:c4:0b:98:98:2c:c4:58:a1:00:d1:32:74:7f:17:4f: |
| f5:bd:93:c2:4a:db:06:d3:91:16:4a:1b:72:c2:80:3a:e3:8b: |
| ca:8f:d7:49:1c:7b:76:6d:42:cb:97:af:fa:36:74:b1:5f:0a: |
| 0a:3a:c5:bd:6d:d7:2c:8a:d1:c8:cf:c2:b1:89:ed:0d:9a:6d: |
| a1:e8:d1:3b:1c:67:1b:26:10:3f:93:d2:1f:87:a4:69:1f:77: |
| 40:08:74:eb |
| -----BEGIN CERTIFICATE----- |
| MIIDZTCCAk2gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6hdUBaFHOUdp59OP/t |
| qNvclK1ekMH6T8aPXA0X/QjUNC1KHbejvIiu8Px6u+r+yOZPW2S8DPhkAcyugmhp |
| 1bD7pTEBul35bYXCscnaHIQBJNy73lJU8qKkDiXYwQd/6YAaH/h+a9Afw20eaQ7r |
| 3Aet5JLYNH0RGSfq4e9Ukq4tNI6ABoQuPrNjBmPC24h7KvJnY+PTMctKBW/DhYwA |
| SsEaC8vEkPrbHZeyM1qGtIGbSPHKWYjPxwX9GHWpw38geqol7KTbH+p2svelLVeQ |
| q+fe/tHXcY4rRmR844yriIR9ZD45D4qrmX1aYwgdKElFbplP9rmGu9FGbJfsNila |
| vBUCAwEAAaOByzCByDAdBgNVHQ4EFgQU/2tV40gHOn2lN+5Mk0OBIQ7NX9AwHwYD |
| VR0jBBgwFoAU/2tV40gHOn2lN+5Mk0OBIQ7NX9AwNwYIKwYBBQUHAQEEKzApMCcG |
| CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA0Rfx8yDji |
| Qof23vIHrZqUzq/nCS4FaE8lARuuDMlVIUJVAkICg6/PckSWKOlD4rxTOGf5IEQT |
| diAjpT2him28MyUmJG/KWMYmrK3LaXlEPQH7L28jR9qJrwsiHgYn6gi1EThZnYcZ |
| slE8IuzCseP0bGVK/w2nI0Dn2PM7daE2u+CqiF0UzaVuR0sJ5/sS1E4x4v9Y7b0G |
| LsInjx67FCTPI5pjl/fEC5iYLMRYoQDRMnR/F0/1vZPCStsG05EWShtywoA644vK |
| j9dJHHt2bULLl6/6NnSxXwoKOsW9bdcsitHIz8Kxie0Nmm2h6NE7HGcbJhA/k9If |
| h6RpH3dACHTr |
| -----END CERTIFICATE----- |
